Course Catalog

This introductory self-paced course offers a comprehensive overview of the Illumio Breach Containment Platform. You’ll gain insight into Illumio as a company, explore key concepts such as Illumio Insights and Illumio Segmentation, and discover how the platform secures networks across cloud environments and data centers. The course also introduces the platform’s core components and their functions, providing you with a solid foundation for understanding how Illumio helps contain breaches and protect critical infrastructure.      

This course covers a detailed introduction to labels and policy objects within the Illumio platform, building on the "Intro to Illumio" course. You’ll learn the importance of labels in workload identification and policy rules, and how to define and use both standard and flexible labels. Additionally, the course covers IP Lists, Label Groups, and Services, providing a comprehensive understanding of their role in enforcing security policies.      

This self-paced course introduces the process of onboarding and managing workloads in the Illumio Console across both data center and cloud environments. Learners will explore how to deploy and manage Virtual Enforcement Nodes (VENs) and connect assets from AWS, Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI). For the videos on Onboarding Cloud Assets: AWS, Azure, OCI, GCP, watch the video(s) that apply to your infrastructure. If you are taking the Certification exam, you will need to complete all of the videos.   

This intermediate course helps you understand managed and unmanaged workloads within the Illumio Platform, with a focus on managing and troubleshooting Virtual Enforcement Nodes (VENs). Building on the "Intro to Illumio" course, it covers the basics of workloads, VEN architecture, how to pair VENs, and the steps to troubleshoot common VEN issues.      

This series provides a step-by-step guide to identifying and organizing both data center and cloud assets using Illumio’s labeling and policy framework. You’ll learn how to create and manage labels, map cloud tags, define applications, and build foundational policy objects to enable effective segmentation and visibility.

This intermediate course teaches the fundamentals of policy management within the Illumio platform, requiring completion of the "Intro to Illumio" course. You’ll explore how policies work, including various options and types, and learn to create and apply rules. The course also covers the use of Illumio’s visualization tools for evaluating network flows.      

This course shows you how to use Illumio’s visibility and Insights features to understand your environment and traffic flows. You’ll learn how to map workloads with labels, use services and IP lists, and explore key views like Map, Traffic, and Mesh. You’ll also get an introduction to Illumio Insights and Insights Agent, and then finish with a short Knowledge Check to confirm what you’ve learned.

This course builds on your knowledge of policy management in the Illumio platform, following the completion of "Intro to Illumio" and "Illumio Policy Management Level 1." You’ll learn advanced policy concepts, how to write scopeless and scoped rules, apply segmentation strategies, and manage policy changes. The course also introduces Endpoint policies and covers how to implement and troubleshoot them.      

Focused on User Administration within the Illumio platform, this intermediate course requires prior completion of "Intro to Illumio." The course covers essential user management tasks, including the difference between local and external users, adding and removing users from the PCE, applying access restrictions, adding service accounts, and troubleshooting basic user permission issues.      

This course introduces the administration of the Policy Compute Engine (PCE) for those who have completed "Introduction to Illumio ZTS" course. You’ll learn how to use PCE commands, handle database operations and certificates, and perform basic troubleshooting, providing a solid foundation for managing the PCE.      

This course offers a deep dive into the architecture and setup of the Policy Compute Engine (PCE), requiring completion of "Introduction to Illumio" course and "PCE Administration I." You’ll explore PCE types, installation and deployment options, health monitoring, report generation, and upgrade procedures.      

This intermediate course focuses on the functions of the Illumio API, requiring prior completion of "Intro to Illumio" course. You’ll learn about the core API functions (POST, GET, PUT, DELETE) and various authentication methods. The course also introduces the basics of using an Illumio API tool, such as the Workloader command-line tool.      

This introductory course provides a foundational understanding of segmentation policy in Illumio. Learners will explore core policy concepts, including application and organizational policies, allow and deny rules, and how segmentation rules are structured, evaluated, and enforced across data center and cloud environments. Through practical explanations and console-based examples, the course demonstrates how to design effective segmentation strategies, develop policies in phases, and use deny rules to establish strong security boundaries while allowing approved communications. Learners will also gain insight into the provisioning process and how policy changes are prepared, versioned, and delivered to workloads.

This course introduces how to design and build scalable data center policy in Illumio using a phased segmentation strategy. Across 10 modules, you’ll learn the main types of policy, how to approach segmentation strategy, and how to progress from application-level controls to role-based policy—first for all services and then for specified services only. You’ll also learn how to write extrascope rules and IP list rules, and how to use organization policy deny rules. Finally, you’ll learn how to separate environments using organization policy. The course concludes with a Knowledge Check to confirm you can apply these concepts correctly.

This introductory Endpoint course explains how Illumio Endpoint differs from traditional server segmentation and prepares learners to deploy and manage Endpoint in real environments. Learners begin by comparing server vs. endpoint VEN behavior and use cases, then walk through the endpoint pairing process to bring devices under management. From there, the course demonstrates how to create and apply endpoint policy, with practical, console-based examples that show how endpoint communications are controlled and validated. Finally, learners learn how policy and visibility behave across domain and non-domain interfaces, helping them anticipate common rollout considerations and avoid surprises during deployment. The course concludes with a Knowledge Check to confirm understanding of key endpoint concepts, workflows, and common considerations.

This course will teach you advanced rule writing concepts for complex policies and how to troubleshoot policy issues as well as how to tighten policies, identify core services and write core services rules. This course utilizes Illumination+ Before you take this course, please make sure you have taken the following course(s): Introduction to Illumio Core (Self Paced), Labels and Policy Objects, Workloads, Policy Management Level 1 and 2.

The PCE Troubleshooting course guides you through foundational skills and knowledge you need to troubleshoot the Illumio Core Policy Compute Engine (PCE). In this course, you’ll get an overview of common issues you may need to troubleshoot along with demonstrations of troubleshooting different aspects of the Illumio Core PCE, like operations, maintenance and performance. Before taking this course, please make sure you have taken the following courses: Introduction to Illumio Core (Self-paced), Workloads ​&​ Labeling, Policy Management I, Policy Management II, Traffic Visualization, Policy Management III, PCE Admin I and PCE Admin II.

This advanced course builds on foundational Illumio segmentation knowledge to help learners design, interpret, and troubleshoot more sophisticated policy models. Learners will dive deep into how scopes shape policy intent and enforcement, including working with multiple scopes, label group policy, and the nuances of extrascope rule behavior through guided examples. The course also explores the full policy lifecycle and operational workflow—from draft to active to archive—so learners understand how changes can be provisioned and reverted if necessary. Through a series of real-world “complex policy” scenarios and hands-on console walkthroughs, learners will learn to evaluate policy outcomes, identify conflicts or unexpected behavior, and apply troubleshooting techniques with confidence. Finally, learners will be introduced to core services policy patterns and best practices, reinforced through multiple examples that demonstrate how to consistently enable essential services while maintaining strong segmentation boundaries. The course concludes with a Knowledge Check to confirm understanding of advanced policy concepts and common troubleshooting approaches.

In today’s threat landscape, even the strongest security posture can be breached. This self-paced course equips learners with a practical, step-by-step approach to incident response using Illumio. Participants will learn how to: Prepare for potential breaches by setting up labels, policies, and containment strategies in advance. Respond swiftly to isolate compromised systems, block malicious traffic, and maintain business continuity. Recover safely by investigating incidents, restoring operations, and refining future response plans. Learners will explore Illumio’s label-based segmentation model to enforce quarantine levels, automate containment, and support forensic investigations—all while keeping critical systems online.

This course will teach you the architecture, key concepts, and the integration requirements to use Illumio Segmentation for  Kubernetes. You will learn how Illumio Segmentation provides visibility and segmentation for containerized applications.  Before you take this course, please make sure you have taken the following course(s): 101 Introduction to Illumio Segmentation (Self-paced) before taking this course. 

When a VEN cannot be installed for visualization purposes, Illumio has an extended policy model that utilizes switches and the switch interface called the Network Enforcement Node (NEN). This course allows users to gain familiarity with Illumio Core's NEN. This course is a standalone course that does not fall under any Learning Path. 

This video course will introduce you to Illumio Segmentation for the Cloud and teach you how to onboard your AWS and Azure cloud accounts. This course also covers how to define deployments, applications, map labels, and how to write policy using Illumio Segmentation for the Cloud.

This course is designed for users with read-only access to the Illumio platform. It provides a high-level overview of key features, including mapping, labeling, and an introduction to policy. You'll learn how to navigate and interpret the Illumio interface, understand how labels organize workloads, and gain insight into how policies are structured—all without making changes to the environment.